Start
Static task
static1
Behavioral task
behavioral1
Sample
e11bb69a593d0bc9b4fbda7871db0dd1.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e11bb69a593d0bc9b4fbda7871db0dd1.dll
Resource
win10v2004-20240226-en
General
-
Target
e11bb69a593d0bc9b4fbda7871db0dd1
-
Size
11KB
-
MD5
e11bb69a593d0bc9b4fbda7871db0dd1
-
SHA1
37df4cc8c585bb94ce41d54bc15e5e563a85400c
-
SHA256
992112263b3e71207598f8dba1db834fefc03e86c3c837454404e0510ba0cec3
-
SHA512
4ff8e3dfe0b6bbedfc13b4a2f3201d3f8b6202e7f1e8852dcc9b15c5c2a430ee6c582ae6cb2998b171fb028809e4f6d315a70cf9a71e039ff5bd84c68468b1cc
-
SSDEEP
192:yWP1tanhX+aZBwo8/lgBoxcKpqPXEOC4az0srU8jvTqT4lbEa7GDg38GDC0kgUwQ:yGe5v9wlJK2aXxlaz0B8jvTqTgbb7DwR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e11bb69a593d0bc9b4fbda7871db0dd1
Files
-
e11bb69a593d0bc9b4fbda7871db0dd1.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE